This is your reference for IAM when you need to write policies, set up roles, or debug permission errors. It covers the fundamentals well: service roles for Lambda, cross-account access patterns, and the difference between identity-based and resource-based policies. The troubleshooting section is genuinely useful, especially the policy simulator commands for debugging access denials. What makes this practical is the side-by-side CLI and boto3 examples for common tasks. IAM is one of those AWS services where you need the syntax right the first time, and having trust policy templates and the actual commands for attaching policies saves you from constantly context switching to the docs.
- skills.sh installs
- 145
- GitHub stars
- 1.2K
- last updated
- Jun 8, 2026
Install
$ npx -y skills add itsmostafa/aws-agent-skills --skill iam --agent claude-codeInstalls into .claude/skills of the current project.
Files
AWS IAM
AWS Identity and Access Management (IAM) enables secure access control to AWS services and resources. IAM is foundational to AWS security—every AWS API call is authenticated and authorized through IAM.
Table of Contents
Core Concepts
Principals
Entities that can make requests to AWS: IAM users, roles, federated users, and applications.
Policies
JSON documents defining permissions. Types:
- Identity-based: Attached to users, groups, or roles
- Resource-based: Attached to resources (S3 buckets, SQS queues)
- Permission boundaries: Maximum permissions an identity can have
- Service control policies (SCPs): Organization-wide limits
Roles
Identities with permissions that can be assumed by trusted entities. No permanent credentials—uses temporary security tokens.
Trust Relationships
Define which principals can assume a role. Configured via the role's trust policy.
Common Patterns
Create a Service Role for Lambda
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/itsmostafa/aws-agent-skills
- Categories
- AI & Agent Building, Debugging, Cloud & Infrastructure
- License
- MIT
- First seen
- Jun 11, 2026
More from itsmostafa/aws-agent-skills
All 18Recommended
More AI & Agent Building
enonic-sandbox-managerwebmaxru/enonic-agent-skillsGuides developers through Enonic CLI commands for sandbox management, project scaffolding, local development, app deployment, and CI/CD pipeline generation. Use145skills.sh installs
cloudflarehoodini/ai-agents-skillsBuild and deploy on Cloudflare's edge platform. Use when creating Workers, Pages, D1 databases, R2 storage, AI inference, or KV storage. Triggers on Cloudflare,144skills.sh installsenonic-webhook-integratorwebmaxru/enonic-agent-skillsSets up Enonic XP event listeners, webhook configurations, and external system integrations triggered by content lifecycle events. Covers lib-event listener reg144skills.sh installs
enonic-content-migrationwebmaxru/enonic-agent-skillsGenerates Enonic XP scripts for bulk content operations — creating, updating, querying, migrating, and transforming content using lib-content and lib-node APIs.143skills.sh installs
api-gatewayitsmostafa/aws-agent-skillsAWS API Gateway for REST and HTTP API management. Use when creating APIs, configuring integrations, setting up authorization, managing stages, implementing rate142skills.sh installs